.png){kind=icon}
返回
Cybersecurity awareness training programs: a cost-benefit analysis framework
.png){kind=icon}
PRE
AI
DOI：10.1108/IMDS-08-2020-0462.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Purpose - Employees must receive proper cybersecurity training so that they can recognize the threats to their organizations and take the appropriate actions to reduce cyber risks. However, many cybersecurity awareness training (CSAT) programs fall short due to their misaligned training focuses. Design/methodology/approach - To help organizations develop effective CSAT programs, we have developed a theoretical framework for conducting a cost-benefit analysis of those CSAT programs. We differentiate them into three types of CSAT programs (constant, complementary and compensatory) by their costs and into four types of CSAT programs (negligible, consistent, increasing and diminishing) by their benefits. Also, we investigate the impact of CSAT programs with different costs and the benefits on a company's optimal degree of security. Findings - Our findings indicate that the benefit of a CSAT program with different types of cost plays a disparate role in keeping, upgrading or lowering a company's existing security level. Ideally, a CSAT program should spend more of its expenses on training employees to deal with the security threats at a lower security level and to reduce more losses at a higher security level. Originality/value - Our model serves as a benchmark that will help organizations allocate resources toward the development of successful CSAT programs.
Keyword:
Awareness training
Benefit
Cost
Cybersecurity
Level of security
期刊
I
IF:
4.7
论文数:
2.4K
被引数:
8.8K
机构
引用论文
.png){kind=icon}
Optimal information security investment in a Healthcare Information Exchange: An economic analysis
PREAI
分享收藏Hydrodesulfurization of 4,6-DMDBT on multi-metallic bulk catalyst NiAlZnMoW: Effect of Zn4，6-DMDBT在多金属本体催化剂NiAlZnMoW上的加氢脱硫: Zn的影响
PREAI
分享收藏
查看更多内容